Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53356.roa
File:                     AS53356.roa (raw, json)
Hash identifier:          hX0kvsKpIxnh0wZJfUVmgO2Ox83ZplAZVkP5l2OvTEI=
Subject key identifier:   8C:47:48:A2:0A:EA:3B:1F:DF:4B:8F:96:1B:85:83:DC:BE:25:F8:D6
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       02F8796BA25D81ACAA309CE9FE96C09DCFEB92B6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53356.roa
Signing time:             Thu 31 Aug 2023 07:52:05 +0000
ROA not before:           Thu 31 Aug 2023 07:47:05 +0000
ROA not after:            Thu 29 Aug 2024 07:52:05 +0000
asID:                     53356
IP address blocks:        157.254.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f8:79:6b:a2:5d:81:ac:aa:30:9c:e9:fe:96:c0:9d:cf:eb:92:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 31 07:47:05 2023 GMT
            Not After : Aug 29 07:52:05 2024 GMT
        Subject: CN=8C4748A20AEA3B1FDF4B8F961B8583DCBE25F8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:51:f2:e4:05:f1:50:7d:ec:ad:5d:39:81:
                    b9:5b:30:7d:e5:60:50:60:1f:a5:c0:09:a4:95:55:
                    ee:d3:4a:14:a8:b7:af:a0:75:77:bc:86:ed:61:c5:
                    4f:1f:d1:7d:36:42:1a:07:8b:17:f6:5c:53:31:42:
                    26:5c:03:e0:57:aa:dc:45:4f:ad:41:11:46:58:8d:
                    92:af:c1:90:56:41:61:9a:a8:7a:1c:a2:df:d6:10:
                    52:e2:7c:34:4f:a8:e7:13:71:0c:c5:18:3e:95:be:
                    fd:6d:28:54:a8:29:f5:b2:98:7c:c6:9d:9f:f0:fd:
                    27:5a:d6:86:c9:95:ec:bc:91:88:2d:00:7c:ef:f9:
                    e8:d3:81:8c:4f:23:53:da:62:2d:b6:e3:95:42:84:
                    f8:60:fc:83:de:c8:94:fb:6d:c3:66:1d:f8:7f:bd:
                    6b:01:15:f0:1d:2d:e1:6b:6f:82:7d:4a:e8:88:f6:
                    70:33:fc:8d:9f:d1:52:12:33:f6:dc:c2:00:04:ee:
                    89:49:38:de:6f:9a:ba:c5:fa:88:1a:a2:f8:52:6e:
                    12:d7:1e:c3:ed:fd:18:87:49:2f:ce:cb:7c:d3:7c:
                    5a:0c:2b:a2:94:78:cf:51:71:30:48:e1:d4:62:38:
                    7b:13:44:32:19:1c:db:64:f7:8c:3a:1c:e1:bb:c4:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:48:A2:0A:EA:3B:1F:DF:4B:8F:96:1B:85:83:DC:BE:25:F8:D6
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:a4:bb:5c:7d:6e:ad:4a:e7:eb:f2:be:f7:1d:62:cf:e0:
         0a:53:5c:b3:0f:b7:8c:c2:9f:9f:40:78:3c:12:d8:a7:fe:64:
         e4:e8:e9:05:a6:d7:36:3d:78:49:74:8c:90:2c:91:0c:85:78:
         a0:b6:e7:e1:19:28:a6:7a:ee:0b:a9:a5:06:db:be:87:40:a9:
         37:f9:79:d7:38:12:b6:4b:a5:36:7c:0e:60:9c:b0:d0:36:22:
         ae:59:ec:63:8f:70:5f:a5:c7:ce:61:4b:55:25:e9:9d:58:f7:
         b6:b7:7c:a9:49:96:40:be:33:db:f8:7c:af:a4:70:ef:84:78:
         67:b7:26:c6:67:cc:c1:12:86:68:a3:54:e3:a1:35:11:7f:bd:
         e5:fd:af:f7:ac:96:e5:3d:20:e4:29:93:7b:32:5f:08:89:9a:
         61:f5:f9:a7:f9:9e:b4:66:82:89:ca:5d:ad:8a:41:8d:23:16:
         3c:6a:cc:41:90:5b:e5:31:3c:8c:de:1c:59:ff:1f:b3:79:95:
         31:18:3d:5f:42:11:7d:05:ad:3c:11:78:94:ab:65:fa:7a:41:
         23:52:5d:b0:04:b4:cd:18:5b:2b:db:0e:53:02:48:7f:96:62:
         4b:e6:5d:b8:d1:e6:b2:29:aa:b9:7d:2c:af:36:29:46:57:ea:
         c9:ef:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org